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WHAT IS CLAIMED: 

1. A data processing apparatus comprising: 

encrypting maap for encrypting data in units of an encryption block having a 
predetermined data length; 

processing meafifc for performing predetermined processing on data in units of a 
processing block having^ data length of a whole multiple of said predetermined length of 
said encryption block; 

storage means for Storing the encrypted data; and 
control means for writing the encrypted data in said storage means so that the data 
positioned in the same encryption block is also positioned in the same processing block, 
said control means reading tfye data from said storage means in units of the processing 
block. 

2. The data processing apparatus as set forth in claim 1, wherein said control 
means inserts data into said processing block to adjust the data length in the processing 
block so that the length of said processing block becomes a whole multiple of the 
predetermined data length of sard encryption block. 

3. The data processing apparatus as set forth in claim 1, wherein said encrypting 
means performs encryption processing using the encryption block to be encrypted and a 
cipher text obtained from the encryption of the encryption block immediately prior to the 
encryption block to be encrypted! 

4. The data processing apparatus as set forth in claim 3, wherein said control 
means manages the encrypted data stored in said storage means using a cluster containing 
one or more processing blocks andlvalues initially used when encrypting an encryption 
block in one of said processing bloaks. 

5. The data processing apparalus as set forth in claim 4, wherein said control 
means stores said one or more processing blocks at consecutive addresses of said storage 
means in the order of encryption, stores said one or more encryption blocks in said 
processing blocks at consecutive addresses of said storage means in the order of 
encryption, and stores said initial valuelVt an address immediately prior to the address of 
at which the first encryption block in tha cluster is stored. 



GMK0077 



♦ 



PATENT 
450100-02402 



6. The data pre cessing apparatus as set forth in claim 1, wherein said control 
means outputs said da^ i read out in processing block units to said processing means. 

7. The data processing apparatus as set forth in claim 6, wherein 
said data is coir pressed; and 
said processing means expands the data read from said storage means in units of a 

processing block. 

8. A data proc^sbing system for inputting and outputting data while performing 
mutual identification between a storage apparatus and a data processing apparatus, said 



storage apparatus comprising: 

first mutual identification processing means for performing processing for mutual 
identification with said jh|ta processing apparatus; 

storage means for 

first control means 

i 

processing apparatus and 



storing said data; and 

br allowing the input and output of data between said data 
aid storage means when said data processing apparatus is 



recognized to be a legitimate party by the processing for mutual identification; 



said data processin 



second mutual ider tification processing means for performing processing for 



mutual identification with 
encrypting means 

predetermined data length 
processing means 



apparatus comprising: 



aid storage apparatus; 

3r encrypting data in units of an encryption block of a 



3r performing predetermined processing on said data in units 
of a processing block having a data length that is a whole multiple of the predetermined 
data length of the encrypti n block; and 

second control mea is for performing at least one of write processing and read 
processing when said data 'processing apparatus is recognized to be a legitimate party by 
the processing for mutual ic entification, for writing the encrypted data in said storage 
means so that data positioned in one encryption block is also positioned in the same 
processing block during wri te processing, and for reading the data from said storage 
means in units of a processing block during read processing. 

9. The data processing system as set forth in claim 8, wherein said second control 
means inserts data into saidl processing block to adjust the data length in the processing 
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block so that the length of saiti processing block becomes a whole multiple of the 
predetermined data length of said encryption block. 

10. The data process ng system as set forth in claim 8, wherein said encrypting 
means performs encryption processing using the encryption block to be encrypted and a 
cipher text obtained from the encryption of the encryption block immediately prior to the 
encryption block to be encry rted. 

11. The data process ng system as set forth in claim 10, wherein said second 
control means manages the e icrypted data stored in said storage means using a cluster 
containing one or more proce ssing blocks and values initially used when encrypting an 
encryption block in one of sa d processing blocks. 

12. The data processing system as set forth in claim 11, wherein the second 
or more processing blocks at consecutive addresses of said 

storage means in the order of encryption, stores said one or more encryption blocks in 
said processing blocks at consecutive addresses of said storage means in the order of 

tial values at an address immediately prior to the address of 
at which the first encryption block in the cluster is stored. 

13. A data processing method, comprising the steps of: 
encrypting data in units of an encryption block having a predetermined data 



length; 



having a data length that is a 

encryption block; 

writing the encrypted 

one encryption block is also 
reading the data from 
14. The data process 



performing predeterrr ined processing on said data in units of a processing block 



whole multiple of the predetermined data length of the 



data to a storage means so that all of the data positioned in 
)ositioned in the same processing block; and 
the storage means in units of the processing block, 
ng method as set forth in claim 13, further comprising the 
step of inserting data into saijd processing block to adjust the data length in the processing 
block so that the length of said processing block becomes a whole multiple of the 
predetermined data length o 'said encryption block. 

15. The data process ing method as set forth in claim 13, further comprising the 



step of using the encryption 



Mock to be encrypted and a cipher text obtained from the 
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encryption of the encry >tion block immediately prior to the encryption block to be 
encrypted to perform ei cryption processing. 

16. The data processing method as set forth in claim 15, further comprising the 
step of managing the er crypted data stored in said storage means using a cluster 
containing one or more processing blocks and values initially used when encrypting an 
encryption block in onelof said processing blocks. 

17. The data processing method as set forth in claim 16, further comprising the 
steps of : 

storing said one dt more processing blocks at consecutive addresses of said 
storage means in the order of encryption; 

storing said one onmore encryption blocks in said processing blocks at 
consecutive addresses of said storage means in the order of encryption; and 

storing said initial values at an address immediately prior to the address of at 
which the first encryption Block in the cluster is stored. 

18. The data processing method as set forth in claim 13, further comprising the 
step inserting data into said processing block to adjust the data length in the processing 
block so that the length of said processing block becomes a whole multiple of the 
predetermined data length on said encryption block. 
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